Tag Info

New answers tagged

2

This is not going to be useful. Pressing function keys in Midnight commander doesn't result in shell commands but in direct library and subsequent kernel calls to modify the file system. Logging on this level will be overwhelming and not useable (run mc in strace to see what I mean). If what you want to track is who modified which file and when, look into ...


1

I just happened to spend several hours trying to find out how to enable debug logs in PAM on CentOS 6.4. Although this question is for Debian, I will still write down how to do it on CentOS in the hope that other people don't have to put in the time that I already have. As it ultimately turned out, enabling debug logs in the pam CentOS package is ...


1

It has been known in the *nix and network community for a long time that logging usernames can sometimes divulge the password of an account. For example: Someone types the username, and accidentally hits return twice. This will result in two login failures being logged, one for the username, and one for the password in the username field.


3

I'd recommend that you consider using logstash for this. It can consume text log files and pipe the log entries to a wide variety of other systems, including syslog. You may be able to hack something together using netcat or the like, but using a purpose-built tool like logstash is going to be far better in the long run. In addition to merely serving as a ...


2

Your best best would be to set up your local syslog server to read the files and send them to your remote location. I've used syslog-ng, rsyslog and nxlog extensively for this. A quick look at google shows that syslogd should be able to do the same.


1

Probably there are different ways but the following will do that: Exec if not (($raw_event =~ /^(\d{4})(\d{2})(\d{2}) /) and \ (substr(string(now()), 0, 10) == $1 + '-' + $2 + '-' + $3)) drop(); Note that NXLog will only send the most recent data and normally does not resend the whole file unless the log source creates a new one and copies ...


0

You might want to check at what logging level your device is configured to run. Step-by-step information on configuring logging message levels and types is available here.


0

Put this line: invoke-rc.d rsyslog rotate > /dev/null instead of: reload rsyslog >/dev/null 2>&1 || true It will cause rsyslog to properly reload, close rotated files and new open log files for writing.


0

Use this: *.info;user.*;mail.none;authpriv.none; /var/log/messages; I added "user.*" part, which causes syslog daemon to accept LOG_USER messages.


0

Got solution for forwarding 'Application and Service Logs -> Microsoft -> Windows -> Windows Firewall with Advanced Security Logs' using nxlog. Need to add the following Query inside the 'im_msvistalog' module Query <QueryList> \ <Query Id="0"> \ <Select Path="System">*</Select> \ ...


0

AFAIK there is no other EventLog modules for nxlog. It could be possible that Enterprise version is more capable in this field than Community version I assume your are using. Maybe not directly answering your question but you can try other log shipper ... I recommend https://github.com/Cimpress-MCP/TimberWinR, it uses MS's LogParser to access EventLog.



Top 50 recent answers are included